Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
File:                     1-n6xEVEw-slAkQYeMUYqVlImiFo.mft (raw, json)
Hash identifier:          T/rtbEPwLkd3u6XSnvi2WkazWaeSRexTiZQE/Cplrgg=
Subject key identifier:   0F:6E:4F:2A:47:3D:0E:92:6D:60:CA:CA:6F:6D:DF:92:5A:48:B5:24
Authority key identifier: FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
Certificate issuer:       /CN=fa7eb1115130fac94091061e31462a565226885a
Certificate serial:       01906D19BAEB29BA20A6980606C0558A5878
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
Manifest number:          06D3
Signing time:             Mon 01 Jul 2024 07:02:01 +0000
Manifest this update:     Mon 01 Jul 2024 07:02:01 +0000
Manifest next update:     Tue 02 Jul 2024 07:02:01 +0000
Files and hashes:         1: 1-n6xEVEw-slAkQYeMUYqVlImiFo.crl (hash: cCx7+ldqjIY9JIJSDIhtqd1ThgJqqubSr6FG3KbZqWc=)
                          2: W6IPBLmrdbaeZDmfnC6g4olOJWI.roa (hash: 4Hwfv6JLP2UA+XObFRyyUJqWC760nd+zVvxPWmwD8xs=)
                          3: fz-q7ZRpxLp12NuYn7E6Th1aCBU.roa (hash: /wD8kSduJKl5XweiEoH2sjrDx5vRb7EDQ5pJGCcasdU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 07:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6d:19:ba:eb:29:ba:20:a6:98:06:06:c0:55:8a:58:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa7eb1115130fac94091061e31462a565226885a
        Validity
            Not Before: Jul  1 07:02:01 2024 GMT
            Not After : Jul  2 07:02:01 2024 GMT
        Subject: CN=0f6e4f2a473d0e926d60caca6f6ddf925a48b524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:53:74:ed:c5:cb:7b:f5:f3:b9:9a:d6:29:11:
                    14:13:79:22:44:b8:83:ef:31:94:63:5b:f3:ed:3d:
                    78:f2:1a:4c:98:5f:ec:50:ce:80:a8:00:3e:8c:82:
                    ae:22:c9:a6:d0:94:48:81:91:b5:0c:d4:6e:85:59:
                    7d:8c:6c:cd:5e:f9:5e:22:c2:22:74:95:70:b7:37:
                    dc:39:75:cb:5b:34:00:18:d9:ee:5c:83:fa:40:43:
                    74:17:fa:64:25:b7:c9:1b:2b:42:49:6c:2e:12:4a:
                    a0:bb:2b:bd:39:63:10:5e:e3:a2:71:36:b9:16:12:
                    aa:11:30:01:86:5e:41:35:6c:a7:95:70:a2:f8:61:
                    9a:c9:19:68:4c:20:39:f4:bc:3f:48:8a:0a:44:e6:
                    35:9b:fc:24:c5:bb:c9:a1:56:a1:3c:5c:91:90:ef:
                    56:86:c6:b1:ba:77:67:8e:ed:3b:c6:06:e8:36:2c:
                    8d:48:c0:91:c6:36:9d:ce:24:e1:24:7e:98:81:10:
                    16:4b:2f:6b:a1:59:fe:4f:bb:84:cd:7d:e8:72:fd:
                    3e:8f:88:a8:7e:ff:49:b7:70:76:8a:8f:70:a5:69:
                    e9:3d:34:71:ba:48:3e:c1:a1:1c:2b:e3:1b:a6:92:
                    16:b1:3c:96:15:57:3a:61:bd:66:36:7e:0a:5f:b6:
                    ea:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:6E:4F:2A:47:3D:0E:92:6D:60:CA:CA:6F:6D:DF:92:5A:48:B5:24
            X509v3 Authority Key Identifier:
                keyid:FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:43:83:b9:b5:a1:fa:3a:dc:e7:92:88:3b:85:2d:81:4e:e5:
         7b:da:55:c9:05:48:2e:57:42:66:d0:de:1e:28:1b:cc:c5:9a:
         c7:d0:05:0b:ea:a4:f7:00:5e:27:c2:a3:1d:55:95:45:92:b4:
         07:53:ae:10:10:67:ac:e4:99:ab:0c:82:6f:be:92:e2:f7:60:
         4a:d1:55:6c:06:ca:87:f4:5d:36:bf:f3:43:44:3b:b5:86:33:
         ce:ef:f2:ee:26:4b:98:b7:93:6c:41:00:2e:c5:5f:54:a7:0a:
         e8:4e:a9:13:e9:e3:e7:07:b1:80:d1:d5:fb:e7:17:5c:06:34:
         a9:9c:64:ac:31:cd:07:1c:4a:c4:55:40:ee:d0:56:c5:3f:fb:
         f5:99:96:1c:c7:55:0d:34:17:5f:46:af:32:47:58:d0:f1:15:
         9c:d2:72:c5:33:ef:6f:2b:17:36:7c:c2:00:f5:81:12:bd:73:
         28:2b:97:6b:23:36:20:ed:a5:30:41:f0:db:f4:80:6b:ef:c7:
         20:bf:8a:46:44:1e:f6:eb:a8:e3:0a:1e:3d:5a:2a:60:2a:4f:
         1a:85:ac:5d:c0:07:8d:7b:b9:e7:98:04:11:cd:90:e9:a1:c6:
         ce:79:42:29:96:fe:13:b8:a0:53:ec:ba:75:74:50:7b:79:e5:
         69:e4:3b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 14:14:03 2024 by rpki-client on console-ams.rpki-client.org